cbcvebase.
CVE-2002-0807
published 2002-08-12

CVE-2002-0807: Cross-site scripting vulnerabilities in Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, could allow remote attackers to execute script as other Bugzilla…

PriorityP418high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.30%
67.5th percentile
Cross-site scripting vulnerabilities in Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, could allow remote attackers to execute script as other Bugzilla users via the full name (real name) field, which is not properly quoted by editusers.cgi.

Affected

3 ranges
VendorProductVersion rangeFixed in
mozillabugzilla——
mozillabugzilla——
mozillabugzilla——

CVSS provenance

nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.